I have an audit setup on various versions of SQL Server to dump their log files to a network share.
The server that reads the files (using sys.fn_get_audit_file) to gather the data from them is 2019.We added some new SQL Server 2022 servers and I setup the audit on them.SQL Server 2019 can't read the audit files and produces this error:
Msg 33201, Level 17, State 1, Line 5An error occurred in reading from the audit file or file-pattern: 'E:\Logdir\auditlogfile.sqlaudit'. The SQL service account may not have Read permission on the files, or the pattern may be returning one or more corrupt files.
I know it's not permissions or corruption because I can read the log file across the network from the file share on the 2019 server using fn_get_audit_file in SSMS from the 2022 SQL Server.Google isn't helping. Did they make some change in 2022 to the sqlaudit files that prevents previous versions of SQL Server from reading them?